1. Introduction

This Privacy Policy describes how the website www.sora-beaute.com (hereinafter the "Site"), operated by the company SORA BUSINESS LLC under the brand name Sôra, collects, uses, and protects users' personal data when they browse or place an order.

Sôra is committed to respecting the confidentiality of personal data and ensuring its protection in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) as well as applicable data protection regulations.

2. Personal data collected

When using the Site, several types of data may be collected.

Automatically collected data

When browsing, we automatically collect certain information related to the device and the use of the Site, including: - browser type and operating system, - IP address, - time zone, - pages viewed, interactions with the Site, browsing path.

This data is collected via the following technologies: - cookies, - log files, - web beacons and tags.

Data collected when placing an order

When making a purchase or creating an account, we notably collect: - first and last name, - billing and shipping address, - payment information, - email address, - phone number.

All of this information is referred to as "Personal Data".

3. Use of personal data

The collected data is used for the following purposes:

• processing, preparing, and shipping orders,
• managing customer service and after-sales service,
• preventing fraud and securing payments,
• improving user experience and Site performance,
• statistical analysis and audience measurement,
• sending commercial and promotional communications, subject to the Customer's prior consent.

4. Sharing of personal data

Certain data may be transmitted to third-party providers strictly necessary for the operation of the Site and the provision of services, including: - Shopify (e-commerce management), - Klaviyo (email and SMS marketing), - Google Analytics (browsing analysis), - Meta / Facebook Ads (targeted advertising).

These providers process data only according to our instructions and in compliance with the GDPR.

Sôra does not sell or rent any personal data to third parties.

5. Legal basis for processing

Data processing is based on the following legal bases: - contract performance (order and delivery), - consent (marketing, cookies), - legitimate interest (security, statistics, Site improvement), - legal obligations (invoicing, accounting).

6. Your rights

In accordance with the GDPR, every individual has the following rights: - right to access their personal data, - right to rectification or update, - right to erasure (right to be forgotten), - right to object to processing, - right to restriction of processing, - right to data portability.

These rights can be exercised at any time by contacting: contact@sora-beaute.com.

7. Data retention

Data is retained for periods proportionate to the purposes pursued: - order data: up to 6 years (legal obligations), - marketing data: 3 years after the last contact, - browsing data and cookies: maximum 13 months.

In case of a deletion request, data will be erased within a maximum of 30 days, unless otherwise required by legal obligation.

8. Data transfer outside the European Union

Certain data may be transferred outside the European Union, particularly to providers located in the United States or Canada.

These transfers are governed by appropriate safeguards (standard contractual clauses, adequacy decisions) in accordance with the GDPR.

9. Marketing communications

Marketing communications via email or SMS are sent only after explicit consent from the Customer.

The Customer can at any time: - withdraw their consent, - unsubscribe via the link present in each communication, - change their preferences.

10. SMS Marketing

By agreeing to SMS marketing, the Customer may receive: - order notifications, - delivery information, - promotional offers, - abandoned cart reminders.

Unsubscription is possible at any time by replying STOP to the received message or by contacting customer service.

11. Cookies

Upon the first visit, an information banner allows the Customer to accept, refuse, or configure the use of cookies, in accordance with the ePrivacy directive and the GDPR.

Preferences can be changed at any time via browser settings or the Site's cookie manager.

12. Changes to the privacy policy

Sôra reserves the right to modify this Privacy Policy at any time to adapt it to legal, regulatory, or technical developments.

The applicable version is the one in effect on the date the Site is consulted.

13. Contact

For any questions regarding the protection of personal data, the Customer can contact:

📧 contact@sora-beaute.com